Python使用SOCKS5代理连接IMAP时遇Socket错误0x02：连接遭规则集拒绝

我尝试用Python通过SOCKS5代理连接IMAP服务器，但持续遇到错误：Socket error: 0x02: Connection not allowed by ruleset。以下是使用的代码：

import imaplib
import socks
import socket
import ssl
import requests
from requests.auth import HTTPProxyAuth

# Proxy configuration
PROXY_HOST = "178.xx.xx.xxx"
PROXY_PORT = 10300
PROXY_USERNAME = "xxx"
PROXY_PASSWORD = "xxx"

# Email configuration
IMAP_SERVER = "imap.gmx.com"
IMAP_PORT = 993
EMAIL = "uhnwlwnosnyu@gmx.com"
PASSWORD = "xxxxx"

def check_proxy_connection():
    session = requests.Session()
    session.proxies = {
        "http": f"http://{PROXY_USERNAME}:{PROXY_PASSWORD}@{PROXY_HOST}:{PROXY_PORT}",
        "https": f"http://{PROXY_USERNAME}:{PROXY_PASSWORD}@{PROXY_HOST}:{PROXY_PORT}"
    }
    try:
        response = session.get("http://api.myip.com", timeout=10)
        response.raise_for_status()
        return response.json()
    except requests.RequestException as e:
        print(f"An error occurred: {e}")
        return None

# Check the proxy connection
proxy_response = check_proxy_connection()
if proxy_response:
    print(f"Proxy is working. Response from api.myip.com:\n{proxy_response}")
else:
    print("Proxy is not working. Exiting the script.")
    exit()

# Set up the proxy with authentication
socks.set_default_proxy(
    socks.SOCKS5,
    PROXY_HOST,
    PROXY_PORT,
    username=PROXY_USERNAME,
    password=PROXY_PASSWORD
)
socket.socket = socks.socksocket

try:
    # Create an SSL context
    ssl_context = ssl.create_default_context()

    # Connect to the IMAP server through the proxy
    imap_client = imaplib.IMAP4_SSL(IMAP_SERVER, IMAP_PORT, ssl_context=ssl_context)

    # Login to the email account
    imap_client.login(EMAIL, PASSWORD)
    print("Successfully logged in")

    # List available mailboxes
    status, mailboxes = imap_client.list()
    if status == 'OK':
        print("Available mailboxes:")
        for mailbox in mailboxes:
            print(mailbox.decode())

    # Select the inbox
    imap_client.select('INBOX')

    # Search for emails
    status, messages = imap_client.search(None, 'ALL')
    if status == 'OK':
        message_numbers = messages[0].split()
        print(f"Number of emails in inbox: {len(message_numbers)}")

        # Fetch the latest email
        if message_numbers:
            latest_email_id = message_numbers[-1]
            status, msg_data = imap_client.fetch(latest_email_id, '(RFC822)')
            if status == 'OK':
                print("Latest email fetched successfully")
                # Here you can process the email content if needed
                # raw_email = msg_data[0][1]
                # email_message = email.message_from_bytes(raw_email)
                # ...

except imaplib.IMAP4.error as e:
    print(f"An IMAP error occurred: {e}")
except Exception as e:
    print(f"An unexpected error occurred: {e}")
finally:
    try:
        imap_client.logout()
        print("Logged out and closed the connection")
    except Exception as e:
        print(f"Failed to close the connection cleanly: {e}")

错误信息 #

An unexpected error occurred: Socket error: 0x02: Connection not allowed by ruleset

已采取步骤 #

• 通过访问http://api.myip.com验证代理可用
• 尝试使用imaplib.IMAP4_SSL通过代理连接IMAP服务器

环境 #

• Python版本: 3.12.3
• 代理处理使用pysocks库
• IMAP服务器: imap.gmx.com
• 代理: 带认证的SOCKS5

错误原因 #

1. 代理规则限制：SOCKS5代理服务器可能配置了访问规则，禁止转发IMAP（993端口）的流量。HTTP/HTTPS请求能通过不代表所有协议都被允许，很多代理服务商默认只开放Web相关协议。
2. 代理协议适配问题：用requests验证时用的是HTTP代理格式，虽然能兼容SOCKS5，但代理对不同协议的转发规则可能存在差异。
3. 全局socket替换的潜在问题：全局替换socket.socket = socks.socksocket可能导致底层连接逻辑异常，比如IMAP的SSL握手阶段无法正确通过代理传递认证信息。

解决步骤 #

1. 确认代理支持IMAP协议/端口 #

联系代理服务商或查看代理管理后台，确认是否允许出站连接到IMAP的993端口。如果是付费代理，可能需要手动解锁非Web协议的访问权限。

2. 替换全局socket配置为IMAP专属socket #

避免全局替换socket对象，为IMAP连接单独创建带代理的socket，示例代码修改如下：

# 移除原来的全局socket替换代码，添加以下函数
def create_proxied_socket():
    sock = socks.socksocket()
    sock.set_proxy(
        socks.SOCKS5,
        PROXY_HOST,
        PROXY_PORT,
        username=PROXY_USERNAME,
        password=PROXY_PASSWORD
    )
    return sock

# 修改IMAP连接部分
try:
    ssl_context = ssl.create_default_context()
    imap_client = imaplib.IMAP4_SSL(ssl_context=ssl_context)
    # 手动创建代理socket并连接
    imap_client.sock = create_proxied_socket()
    imap_client.sock.connect((IMAP_SERVER, IMAP_PORT))
    
    # 后续登录、操作代码保持不变
    imap_client.login(EMAIL, PASSWORD)
    # ...

3. 用命令行测试代理对IMAP的支持 #

使用curl工具直接测试代理是否能转发IMAP流量，命令如下：

curl --socks5 {PROXY_HOST}:{PROXY_PORT} --proxy-user {PROXY_USERNAME}:{PROXY_PASSWORD} imaps://imap.gmx.com:993

如果命令返回连接错误，说明代理确实不支持IMAP，需要更换代理或调整规则。

4. 调试SSL上下文（仅测试用） #

如果怀疑是SSL证书问题，可以临时禁用证书验证（生产环境不建议）：

ssl_context = ssl.create_default_context()
ssl_context.check_hostname = False
ssl_context.verify_mode = ssl.CERT_NONE

若能成功连接，再逐步排查证书配置问题。

内容的提问来源于stack exchange，提问作者Zeus